This ^^^ so very much. Think of it like infosec angle: Yes, it's interesting to identify and neutralize hostile actors, but the 100% more effective solution is to have defense-in-depth and system resilience in place - because you control that, but you can't control the external actors unless you have a god-complex.